command-line-murders/i-0ba65dbd128ebe6a1
by SadServersMore by SadServers
systemd-udev-trigger.service loaded active exited Coldplug All udev Dev systemd-udevd.service loaded active running Rule-based Manager fo systemd-update-utmp.service loaded active exited Update UTMP about Sys systemd-user-sessions.service loaded active exited Permit User Sessions unattended-upgrades.service loaded active running Unattended Upgrades S LOAD = Reflects whether the unit definition was properly loaded. ACTIVE = The high-level unit activation state, i.e. generalization of SUB. admin@i-0de83ec36426f6541:~$ systemctl --type=service | grep kihei admin@i-0de83ec36426f6541:~$ cd /home/admin admin@i-0de83ec36426f6541:~$ ls agent data datafile kihei admin@i-0de83ec36426f6541:~$ kehei bash: kehei: command not found admin@i-0de83ec36426f6541:~$ kehei
kihei/i-0de83ec36426f6541 01:28
by SadServersadmin@i-098e8bd6780cfa047:~$ sudo netstat -antp We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for admin: Sorry, try again. [sudo] password for admin: sudo: 1 incorrect password attempt admin@i-098e8bd6780cfa047:~$ ^C admin@i-098e8bd6780cfa047:~$ sys
paris/i-098e8bd6780cfa047 01:27
by SadServers42108d7968f7038 (ED25519) Jan 12 17:27:40 i-0842108d7968f7038 ec2: 3072 SHA256:hj5IRhHgQNWK1wNwOHkxby3pdb0842108d7968f7038 (RSA) Jan 12 17:27:40 i-0842108d7968f7038 ec2: -----END SSH HOST KEY FINGERPRINTS-----Jan 12 17:27:40 i-0842108d7968f7038 ec2: #######################################admin@i-0842108d7968f7038:~$ curl localhost curl: (7) Failed to connect to localhost port 80: Connection refused admin@i-0842108d7968f7038:~$ curl localhost:3000 curl: (7) Failed to connect to localhost port 3000: Connection refused admin@i-0842108d7968f7038:~$ curl localhost:5000 Unauthorizedadmin@i-0842108d7968f7038:~$ lsof -i -P -n | grep LISTEN gotty 558 admin 6u IPv6 10589 0t0 TCP *:8080 (LISTEN) sadagent 559 admin 7u IPv6 11492 0t0 TCP *:6767 (LISTEN) admin@i-0842108d7968f7038:~$ less /etc/services admin@i-0842108d7968f7038:~$ lsof -i: